Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333373a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363333373a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: vao9roHZagHnQ71a0CSkiq4FJ9/2ahZ11u5yB75eCpE=
Subject key identifier: 04:2E:D1:77:67:52:19:3E:6E:AF:A9:E1:4A:44:B2:97:67:41:67:B6
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 7CEBCD382D87EE699B3558F95253AE4DF08D0197
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333373a3a2f34382d3438203d3e203136393039.roa
Signing time: Wed 21 May 2025 16:00:01 +0000
ROA not before: Wed 21 May 2025 15:55:01 +0000
ROA not after: Wed 20 May 2026 16:00:01 +0000
asID: 16909
IP address blocks: 2a14:7584:6337::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 02:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:eb:cd:38:2d:87:ee:69:9b:35:58:f9:52:53:ae:4d:f0:8d:01:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 21 15:55:01 2025 GMT
Not After : May 20 16:00:01 2026 GMT
Subject: CN=042ED1776752193E6EAFA9E14A44B297674167B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:1b:34:3e:7e:7b:0d:53:b3:eb:d9:90:8f:
7e:b3:ac:08:69:59:9f:52:ae:97:f2:61:bf:4f:4f:
05:ef:b9:49:0f:19:15:0b:dc:a8:d3:e8:54:89:b2:
2a:4e:3b:44:32:a8:33:95:4a:0c:6c:31:0e:f0:df:
e3:35:b6:75:6a:ed:79:10:de:84:76:9a:e7:4a:4b:
31:89:c7:e3:32:73:91:78:35:fa:f8:06:02:a1:72:
9f:31:f9:fd:45:08:c4:c0:0f:50:3a:40:0c:cf:c4:
11:91:8d:01:85:e1:4c:62:b4:23:73:92:ae:a2:48:
9f:08:4d:4c:e6:b7:29:89:49:17:3c:1d:c8:12:c5:
e2:b8:ab:6f:43:2d:fa:55:e6:a5:ca:41:6f:80:38:
d6:07:1b:47:5f:80:bd:9d:93:b4:38:21:20:97:6f:
83:95:7b:e8:df:30:e7:62:8e:19:ed:b3:ad:ee:18:
10:0f:74:e4:92:96:29:85:55:4f:9a:23:fc:c0:ca:
6a:c2:ad:34:51:3d:10:29:66:1b:99:52:3f:df:b6:
ef:6a:ba:d8:22:cc:e4:fd:28:5d:89:d4:33:2c:90:
b1:ef:03:2b:7d:b2:4f:00:c2:53:ac:7f:8a:93:01:
7b:06:cf:4a:12:22:1c:0b:48:64:cb:ad:a0:99:15:
06:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2E:D1:77:67:52:19:3E:6E:AF:A9:E1:4A:44:B2:97:67:41:67:B6
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363333373a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6337::/48
Signature Algorithm: sha256WithRSAEncryption
74:e7:0a:dc:ab:76:09:59:9e:8b:54:82:14:45:fb:f3:51:9b:
26:e4:47:c7:95:dc:da:90:cd:66:96:70:c8:ed:69:8c:8a:bd:
79:59:05:2f:ad:0d:9d:d6:f2:87:ec:65:7f:a0:4a:50:dd:7e:
fe:0c:5d:02:ee:f4:70:32:38:eb:98:79:d8:7d:9a:43:4d:15:
c3:aa:4f:f5:73:b4:db:d0:87:81:20:66:d0:db:34:2c:55:45:
4d:cb:f6:46:c4:94:a5:23:a8:54:17:92:42:82:13:bf:ee:86:
32:13:86:62:7d:0f:0c:ec:bf:bc:ea:d1:93:1c:da:59:40:25:
bc:18:54:1d:a4:e5:40:30:f8:5e:9c:3b:04:5c:e7:2a:4b:e2:
04:e8:1c:96:c2:b8:f0:a8:4d:d2:16:bb:a3:24:1c:78:22:b0:
63:fd:20:d7:d4:94:3b:0b:43:a5:24:61:60:fa:70:7c:df:e5:
38:29:e7:15:d3:61:15:1c:91:df:a9:8f:06:18:0a:a1:2a:94:
c5:07:f8:49:33:4f:ec:ee:39:45:64:3b:f1:26:3c:22:bc:c5:
45:1f:d1:cc:3a:cf:71:30:13:2a:1a:f1:db:f3:47:e2:29:f7:
41:5f:5e:9a:dc:f4:cd:ad:f3:a4:89:b9:65:aa:3c:01:1b:2d:
f3:44:84:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:58:24 2025 by rpki-client